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Abstract 


In home environments, the customization of applications according 
to inhabitant’s information requires the integration of heterogenous 
event sources and services. To do that, the events have to be collected 
and processed, and the volatile services identified and used. The in- 
formation collection and service access have to be done considering 
the identity of users in order to avoid unexpected behaviors in the 
customized applications or unauthorized accesses. However, although 
the event flow, service mobility and user identity are key issues in the 
customization of applications, existing solutions fail to deal with them 
in a simple and flexible way. Therefore, in this paper we propose to 
face these issues by combining the SCA (Service Component Architec- 
ture) standard, micro-blogging services and discovery technologies. In 
particular, we benefit from the SCA extensibility to introduce support 
for social communications enabling asynchronous event exchange (via 
Twitter), and for pervasive communications to deal with mobility (by 
means of standard discovery protocols such as UPnP). Furthermore, 
we exploit the intents from SCA in order to allow user identification in 
home environments. We bring the new communications and user iden- 
tity support into the FRASCATI, a platform for SCA applications. We 
illustrate our work with a smart home scenario requiring the integration 
of heterogeneous technologies. 
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1 Introduction 


In home environments, the adaptation of applications and room customiza- 
tions according to user preferences and other context information require the 
collection, filtering and processing of events produced by different kinds of 
sources (e.g., mobile devices and sensors). The different responsibilities of the 
adaptation—i.e., monitoring, analysis, decision making and execution—can 
be distributed in several entities, which dynamically join and leave the envi- 
ronment, in order to benefit from the most powerful devices. Furthermore, 
the users influencing the adaptation process can be inhabitants, friends or 
external people. This means that the changes on applications and room 
configurations have to be done according to the user identity. However, 
although the information flow and mobility as well as user authentication 
are key issues in the adaptation of application and room customizations, the 
existing approaches fail to deal with them in a simple and flexible way. 

In this paper we propose to extend the SCA (Service Component Archi- 
tecture) [19] model in order to increase communication and authentication 
capabilities in home environments. In particular, regarding communications 
SCA provides the flexibility for adding new kinds of interaction by means of 
bindings. SCA bindings encapsulate the communication protocols, isolating 
distribution concerns from the business logic. We take advantage of this 
concept in order to bring social and pervasive communications into SCA. 
In this way, we introduce two new bindings: social bindings and pervasive 
bindings. The formers benefit from micro-blogging services, such as Twit- 
ter [12], to build social networks for asynchronous event exchanges in home 
environments. The latter supports mobility of entities in the environment by 
providing discovery support via the UPnP (Universal Plug and Play) proto- 
col [25]. We choose UPnP because it is a well-accepted standard in the home 
entertainment industry to create, for example, TVs and Network-Attached 
Storage (NAS) devices. Furthermore, the Digital Living Network Alliance 
3 (DLNA), which ensures interoperability between devices from different 
manufacturers, supports the usage of the UPnP technology. We integrate 
the social and pervasive bindings into FRASCATI [24] (a SOA platform 
for the SCA standard) and illustrate their use with a smart home scenario 
exhibiting challenges in terms of protocol heterogeneity and integration. We 
claim that the encapsulation of the distribution concerns in SCA bindings 
enables the transparent event exchange and dynamic service discovery in 


3Digital Living Network Alliance: http://www.dlna.org/home 
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pervasive environments. 

On the other hand, considering the user identity we include into FRAS- 
CATI a component-based authentication mechanism, which respects the SCA 
specifications. The proposed mechanism allows the integration of different 
authentication methods such as IMEI-based recognition for smartphone 
interactions or external authentications. We highlight the relevance of this 
concern in home environment and describe the way we integrate it into our 
platform. Additionally, we illustrate the usage of our proposal by defining a 
multi-user smart home scenario. 

The rest of this paper is organized as follows. We start by presenting 
a smart home scenario (cf. section 2) in order to motive the use of our 
approach and the foundation of our proposal (cf. section 3). We continue 
by describing the integration of our pervasive (cf. section 4) and social 
(cf. section 5) bindings for allowing event distribution. Then, we present 
the authentication management that we bring into the FRASCATI platform 
for user interactions. After discussing the state-of-the-art (cf. section 7), we 
conclude and give some promising perspectives (cf. section 8). 


2 Motivating Scenario: The DigiHome Platform 


The work presented in this paper is motivated by the DIGIHOME platform, 
which introduces the challenges for better connecting smart appliances in 
home environments. As explained in [21], a DIGIHOME environment is 
characterized by the diversity of communication protocols supported by the 
physical equipments deployed in a house. Although, standards like UPnP 
and more recently ZigBee [27] have emerged and are supported by a growing 
number of commercial solutions, there is no general agreement on a single 
protocol for supporting the integration of home appliances. Additionally, 
the emergence of social networks like Facebook and Twitter have encouraged 
new means of communication where users can easily share information with 
a community of trusted contacts via micro-blogging services. Finally, the 
home context implies to deal with the inhabitant identities in term of access 
control, or pervasive recognition. In this context, we describe two scenarios 
where these technologies are smoothly integrated in a modular platform for 
implementing advanced context-aware home monitoring situations. 


Scenario 1. Alice owns two digital frames at home. One of them is able 
to display pictures from a UPnP media server, via a WiFi connection. The 
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other frame has the ability to subscribe to a Really Simple Syndication 
(RSS) feed remotely published. However, Alice is not interested in displaying 
pictures that are randomly or statically selected in a library. She would 
rather prefer to display pictures according to her personal preferences stored 
on the platform. This feature therefore requires the DIGIHOME system to 
automatically detect Alice’s smartphone and retrieve her preferences for 
customizing display for the two frames. Additionally, when Bob joins the 
room, the DIGIHOME platform should merge his preferences, and try to 
satisfy Bob’s and Alice’s desires to display pictures. 


Scenario 2. Alice plans to leave for holidays with Bob in a few days. 
Before leaving, Alice contacts her neighbors asking them if they could take 
care of the house while she is abroad. Neighbors can accept her proposal 
by following her on Twitter in order to be notified of particular events 
related to the house. Whenever a movement is detected in the house while 
Alice is away, the DIGIHOME platform will post a new message on Alice’s 
Twitter account to notify her friends that something is happening in the 
house. Furthermore, to ensure the messages reception, the system filters 
the posts on the Alice’s account and displays them on neighbors’ UPnP TV. 
Depending on the content of the message, Alice’s neighbors can walk to the 
house and physically check the status of the house. The DIGIHOME platform 
detects the neighbor’s smartphone, disables the house monitoring, and logs 
the presence of the neighbor by posting another message on Twitter. 


Challenges. The scenarios we describe here exemplify situations where 
the DIGIHOME platform has to integrate different technologies (UPnP, RSS, 
Twitter) to implement advanced situations combining the house equipments 
(media server, Frames, Set-Top Box), smartphones, and the Internet. In 
the remaining of this paper, we introduce a solution that aims to deal with 
this technology integration and it needs in term of identity support. In 
particular, we build our solution with SCA by defining two features: pervasive 
bindings and social bindings, which we use to implement scenarios 1 and 2, 
respectively. Additionally, we extend our FRASCATI platform in order to 
include heterogeneous authentication management, in respect of the SCA 
standards. 
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3 Background on Service-Oriented Architectures 


In this section, we present the foundation of our proposal—i.e., the SCA 
(cf. subsection 3.1) component model. We also introduce the FRASCATI 
platform (cf. subsection 3.2), which we use to implement our approach. 


3.1 The Service Component Architecture (SCA) 


SCA is a set of specifications for building distributed application based on 
SOA and Component-Based Software Engineering (CBSE) principles [19]. 
In SCA, the basic construction blocks are the software components, which 
have services (or provided interfaces), references (or required interfaces) 
and expose properties. The references and services are connected by means 
of wires. SCA specifies a hierarchical component model. This means that 
components can be implemented either by primitive language entities or by 
subcomponents. In the latter case the components are called composites. 
Figure 1, from the SCA specifications [19], provides a graphical notation for 
these concepts as well as a XML-based assembly language to configure and 
assemble components. 


Application.composite 


ame="application.composite"> 
omote="View/run"/> 


Application 


Legend: 
Wire 


Component Composite Property Reference Service 
a RRR 


interface="app.ControllerService"/> 


Figure 1: SCA graphical notation and assembly language. 

SCA is designed to be independent from programming languages, In- 
terface Definition Languages (IDL), communication protocols and non- 
functional properties. In this way, an SCA-based application can be built, for 
example, using components in Java, PHP, and COBOL. Furthermore, several 
IDLs are supported, such as WSDL and Java Interfaces. In order to support 
interaction via different communication protocols, SCA provides the concept 
of binding. For SCA references, bindings describe the access mechanism used 
to call a service. In the case of services, the bindings describe the access 
mechanism that clients have to use to call the service. 
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3.2. The FraSCAti Platform 


The FRASCATI platform [24] allows the development and execution of SCA- 
based applications. The platform itself is built as an SCA application—i.e., 
its different subsystems are implemented as SCA components. FRASCATI 
extends SCA with reflective capabilities at the application level as well as 
at the platform level. By default, the FRASCATI platform is bundled with 
various plugins for the components Interface (Java, WSDL), Property (Java, 
XSD), Component (Java 5, Java Beans, Scala, Spring, OSGi, FRACTAL, 
BPEL, script), and Binding (Java RMI, SOAP, HTTP, JSON-RPC, SCA, 
OSGi, JNA). Furthermore, the platform has a run-time level that instantiates 
SCA assemblies and components. This run-time is not hard-coded into 
the architecture description. Rather, the run-time level defines a flexible 
configuration process, which is inspired by the extender and whiteboard [20] 
design patterns of OSGi. In particular, both the core platform and various 
plugins are bundles, which are dynamically composed. 


4 Scenario 1: Bindings for Pervasive Communica- 
tions 


In pervasive environments, the discovery capabilities enable the use of the 
available services in a transparent way and provide support for mobility. 
Therefore, we bring this functionality into SCA by defining pervasive bind- 
ings. In this section, we report on the integration of these bindings in the 
FRASCATI platform, using the UPnP technology (cf. subsection 4.1 and sub- 
section 4.2). We also introduce our solution for the automation of service 
discovery in SCA-based applications (cf. subsection 4.3). This integration is 
validated by the implementation of the first scenario (cf. subsection 4.4). 


4.1 UPnP Foundations for Pervasive Integration 


As an Internet-based technology, Universal Plug and Play (UPnP) is built 
upon TCP/IP, UDP, HTTP, XML, and SOAP. The recent development of 
connected devices like Set-top boxes (STB) or smartphones has encouraged 
the integration of this technology as an industry standard for interacting 
with these smart appliances. Therefore, we believe that UPnP represents 
a key technology in pervasive environments for enabling the integration 
of physical devices with IT systems. Typically, this integration requires 
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considering four aspects of UPnP: service discovery, description, interaction, 
and profiles. 


Service Discovery. The most important feature of UPnP technology for 
pervasive usage is the discovery capacity. Using the Simple Service Discov- 
ery Protocol (SSDP) [25], client and server (called, in UPnP terminology, 
Control Point [CP] and Device, respectively) can find themselves without 
any configuration. In order to establish a connection, a CP sends a lookup 
request (using HTTP over UDP), which includes a device type, a particular 
service or a specific device. Devices can send a response that contains the 
URL of their description. In a similar way, when a device joins the network, 
it sends an advertisement announcing its presence. Finally, the devices 
multicast bye-bye notifications indicating that they leave the network and 
therefore the provided services are no more available. 


Service Description. Like any service-oriented application, UPnP devices 
have to describe their capabilities. To do that, UPnP devices and CPs are 
described by means of XML documents. These documents are structured 
following a collection of schema documents, which are also provided by the 
standard. For example, the DLNA imposes a particular schema for the 
description of entertainment devices that are able to share their content with 
each other across a home network. 


Service Interaction. To support the remote invocation of services, UPnP 
exploits Simple Object Access Protocol (SOAP) as a privileged communication 
protocol. Thus, the method invocations are described with XML and sent 
via SOAP over HTTP. 


Service Profiles. Additionally, UPnP provides a set of profiles represent- 
ing manufacturer contracts and ensuring interoperability between heteroge- 
neous hardware. Actually, the most widespread profiles are the Audio Video 
set (AV) profiles, which enable media-oriented home networks. However, 
the use of Web technologies, such as SOAP and XML, makes UPnP inappro- 
priate for real-time operations including multimedia streaming or any other 
kind of operation that requires large amount of data transfer. Therefore, 
the AV profiles face this issue by describing UPnP devices in terms of their 
remote control and streaming capabilities. The remote control functionality 
can be considered as a simple service, while the streaming description allows 
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devices to specify the stream properties, including transfer protocol (e.g., 
RTSP/RTP, HTTP) and data format. Thus, the AV specifications split 
the connection negotiation in two steps: communication description and 
communication establishment. 


4.2 Implementing Pervasive Services using UPnP and SCA 


As mentioned previously, SCA introduces bindings as an open mechanism 
supporting communications between components. Bindings can be imple- 
mented in order to fulfill the requirements of business applications. In 
pervasive environments, the UPnP discovery capabilities—enabling spon- 
taneous communications at runtime—can be considered for dealing with 
services mobility. The comprehensive UPnP communication stack allows the 
advertisement, discovery, and access of services provided by Java applications. 
Therefore, we introduce in SCA the <binding.upnp device-type="..."> element 
specifying that a service (resp. reference) is advertised (resp. discovered) 
via the UPnP protocol. Thus, UPnP can be used as an SCA binding for 
autonomous communications applying SOAP as an underlying mechanism 
for service invocations. 

On the other hand, benefiting from the UPnP modularity in terms of the 
spontaneous communication process, we can discover services with UPnP and 
then access them with different communication protocols (not only SOAP), 
which are described by the others bindings (HTPP, WSDL, etc.) associated 
with the SCA services. This means that the service descriptions and access 
mechanisms are only advertised and discovered with UPnP. Then, using this 
information, the communications are achieved across a suitable protocol, 
which may be selected depending on QoS attributes. Thus, we restrict the 
usage of UPnP to the discovery part of the spontaneous communication 
process. 


4.3. BinJIU: Facilitating UPnP Integration into FraSCAti 


In this section we describe BINJIU, our solution to provide the missing 
elements for implementing UPnP bindings in FRASCATI. In particular, this 
solution provides functionality for UPnP interface compilation and descriptor 
generation. BINJIU also enables the SCA services advertisement as UPnP 
devices and the casting of SCA references to UPnP control points. Below we 
describe these functionalities as well as the integration within FRASCATI as 
a dedicated binding. 
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UPnP Interface Compilation. In order to integrate a standardized 
UPnP profile into the FRASCATI platform, we have to implement an SCA 
component, which is compliant with the profile description. To do that, BIN- 
JIU provides a upnp2java command that parses UPnP descriptions, extract 
UPnP services, and generates the associated Java interfaces. Thus, this 
upnp2java command makes easier the integration of existing profiles, such as 
the Content Directory UPnP profile*, described below: 


public interface ContentDirectory { 
public int GetSystemUpdateID() ; 


public SearchResponse Search( 
String ContainerID, String SearchCriteria, String Filter, 
int StartingIndex, int RequestedCount, String SortCriteria) ; 


public String GetSearchCapabilities() ; 
wink 


UPnP Descriptor Generation. BINJIU supports also the generation of 
UPnP descriptions from Java interfaces, according to the UPnP schemas. In 
this way, we can create devices automatically exposing the UPnP descriptions 
of the underlying Java interfaces. Even if these XML descriptions are not 
standardized, it is a first step for autonomic bindings of Java native interfaces 
in distributed software. 


UPnP Device Integration. The advertisement of an SCA service via 
UPnP technology requires to consider the different aspects discussed in sub- 
section 4.1. In this way, BINJIU dynamically encapsulates a Java interface 
and exposes it as a UPnP service, included into a device. This skeleton is able 
to follow the SSDP advertisement process and answer to UPnP connection 
requests from control points. The current BINJIU implementation is based 
on the CyberLink® UPnP stack for Java. 


UPnP Control Point Integration. In the client side, BINJIU creates 
a proxy from a Java interface, which dynamically converts method calls to 
actions towards a UPnP device, depending on a device type or name. This 
stub is also implemented using CyberLink for Java. 


‘UPnP Content Directory profile: http: //www.upnp.org/standardizeddcps/ 
documents/ContentDirectory1.0.pdf 
°CYBERLINK FOR JAVA: http://cgupnpjava.sourceforge.net 
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FraSCAti Integration. BINJIU has been built as an autonomous appli- 
cation to make easier the integration of the UPnP technologies in Java-based 
applications. However, we need to integrate the BINJIU functionalities into 
the FRASCATI platform in order to enable the use of pervasive bindings 
(cf. subsection 4.2) in SCA applications. To do that, we take advantage of 
the FRASCATI extensibility properties. In particular, FRASCATI already 
provides various SCA bindings (e.g., RMI, REST, and WebServices), which 
means that there is an extension mechanism for smooth integration of new 
kinds of bindings. Thus, following the FRASCATI structure, we can add our 
support for pervasive bindings without impacting the platform functionality. 

At this point, FRASCATI users only need to complete the component 
description by adding the <binding.upnp ...> balise to services or references. 
Comparing to a manual implementation, which imply to manipulate UPnP 
concept and Cyberlink library, this binding greatly facilitates the developer 
work. 


4.4 Validation 


The first scenario, introduced in section 2, illustrates how Alice’s preferences 
influence the frames displaying pictures at home. In this section, we describe 
how FRASCATI and pervasive bindings can be used to realize this scenario. 
Alice’s home is equipped with different entertainment devices. In order 
to keep the data separated from the different computing resources, a NAS is 
available as a standalone device. This NAS broadcasts Alice’s multimedia 
contents over the network, as a UPnP AudioVideo Profile (DLNA certified) 
device. Furthermore, we find a Set-top box (STB) as a central element of 
the environment, which is always available and is able to run FRASCATI 
applications. The two digital frames (UPnP AV and RSS based) are available 
in the environment and an Android smartphone is connected to the home 
network using a wireless connection. Figure 2 depicts the different entities 
in Alice’s home and how they are associated with the DIGIHOME system. 
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[ a - 
Client Application n 
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Figure 2: Using FRASCATI with UPnP bindings. 
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To access the pictures stored in the NAS, we need to generate a Java 
interface compliant with UPnP AV profile (cf. Figure 2:1) using the upnp2java 
command provided by BINJIU. Then, we create an SCA implementation 
of the AV profile with CP capabilities (the av Control Point component) for 
communicating with the NAS over UPnP. 

In order to filter NAS content according to Alice’s preferences, we define 
a simple interface, which provides methods for defining constraints on the 
picture library (cf. Figure 2:2): 


public interface IConstraintManager { 
public void addKeywordsConstraint (String[] keywords) ; 
public void addDateRangeConstraint (Date date1, Date date2); 
public void addFolderConstraint (String folderName) ;} 


The Constraint Manager component provides this interface. This compo- 
nent is able to filter NAS responses and is advertised over the network as 
a UPnP device thanks to our UPnP binding (cf. Figure 2:3). By means of 
a simple control point generated by BINJIU, the Alice’s smartphone can 
interact with this service. Finally, the STB exposes the filtered results as a 
UPnP AV device and a RSS publisher (cf. Figure 2:4), that are used by the 
digital frames for displaying the content. 


5 Scenario 2: Bindings for Social Collaborations 


The micro-blogging services enable the sharing of information in real-time— 
i.e. in term of human appreciation— by reaching a lot of friends in just a few 
seconds. One of the main advantages of these services is the short and simple 
nature of the posted messages. Furthermore, there are no restrictions on 
the subject associated with these messages. In general, this kind of informal 
communications was conceived for broadcasting simple events in the daily life, 
such as what people are doing, thinking, and experiencing [26, 14]. However, 
nowadays the micro-blogging services are also used for collaborative work in 
organizations [26], publicity purposes, and even for broadcasting real-time 
news updates for recent crisis situations. Therefore, the simplicity and 
flexibility as well as the real-time notification property of micro-blogs make 
them a suitable option to enable event-based communication between the 
participants of the DIGIHOME platform. 

In the rest of this section, we present how we bring micro-blogging-based 
communications into the SCA component model by defining social bindings 
(cf. subsection 5.1) and the architecture of our solution (cf. subsection 5.2). 
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We finish with the validation of our approach by analyzing the per- 
formance overhead of our solution in our smart home scenario (cf. subsec- 
tion 5.3). 


5.1 Enabling Social Collaborations using Twitter and SCA 


Following the same idea of pervasive bindings (cf. section 4), we enable social 
communications in pervasive environments by introducing a new kind of 
binding in SCA: the social bindings. These bindings allow the notification of 
situations identified by the system that may require human intervention, like 
the detection of an intruder in our smart home scenario (cf. section 2). To do 
that, social bindings benefit from a simple but widely used micro-blog service: 
Twitter. Furthermore of the advantages of any micro-blogging service, the 
Twitter messages (so called tweets) can be posted using different formats 
(e.g., JSON, XML, RSS and ATOM) and a simple RESTful API [12]. 


Reference (client-side) Service (server-side) 


composite name="neighbor-digihome-system"> composite name="alice-digihome-system"> 
<reference name="neighborhood-monitoring" <service nam 
promote="houses-monitoring/neighborhood-monitoring/"/> promote="house-movement -monitoring/presence-notifivation-service"/> 


<component name="houses-monitoring"> <component. ni monitorin 
<implementation. java class="digihome.EventMonitor"/> <implement, gihome .MovementMonitor"/> 
<reference> 
<event.xml schema="movement-event .xsd"/> 
<binding.twitter user-name="alice"/> 
</xeference> <binding.twitter user-name="alice" password="1234"/> 
</component> </service> 
</composite> </component> 
</composite> 


Legend: 
house-movei | SED Reference with SB 
= monitoring 


E> Senice with SB 


| SB Social Binding 
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Figure 3: Example of a Social Binding for the Smart Home Scenario 

Figure 3 depicts an example of social binding for the Twitter micro- 
blogging service. In the service side (right side of Figure 3), we define a 
service with a Twitter binding that indicates that the information provided 
by the service can be retrieved from a particular Twitter account. We use 
the user and password attributes to indicate the Twitter user providing the 
information. As it can be seen, unlike the typical SCA bindings, the SCA 
services defining Twitter bindings do not require to define specific interfaces. 
Instead, the services specify the representations and types of the events that 
can be retrieved from the Twitter accounts, including the Twitter’s 140 
character limit for example. This information will be used for marking the 
tweets with the event type that contains using Twitter tags. This metadata 
is useful for filtering the events exchanged on the Twitter account. In the 
reference side (left side in Figure 3), we use the <binding.twitter> element 
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to indicate that we want to retrieve events from Twitter. In the references, 
the <event.representation> element specifies the event representations. Thus, 
by encapsulating the event notifications as SCA social bindings, we support 
asynchronous event notification as well as interaction with people involved 
in the smart home. 


5.2 Architecture of the Containers Supporting Social Bind- 
ings 


We have integrated these social bindings into the FRASCATI platform. To do 
this, we applied the ContainerComposite architectural pattern promoted by the 
HULOTTE platform [10]. This means that we define a container composite 
that hosts components and implements event notification as tweets. In this 
way, the social communications are integrated in a transparent way and 
the event processing logic is not impacted by the technical specificities of 
Twitter. 
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Figure 4: Social Bindings Service and Reference Architectures 

Figure 4 depicts the containers implementing the Twitter bindings for 
the neighbor-digihome- system and alice-digihome-system composites (cf. Fig- 
ure 3). In this architecture, we benefit from the Twitter RESTful API by 
building the social bindings upon REST bindings [22]. Therefore, in the 
server side (upper part of Figure 4), we observe that the Event Notification 
Message Handler component serializes events via the Content Type Marshaler . 
The Event 
Notification Message Handler posts the events using the Client component, 
which encapsulates the communication mechanism (i.e., HTTP in the case 
of Twitter). The Twitter User component orchestrates the tweets publication 
process by providing the required information for the Twitter requests, such 
as user name, password, and event types. 
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On the other hand, the client side (low part of Figure 4) uses a Twitter 
Followers Manager component to periodically retrieve the recent tweets on 
the followed Twitter accounts. This component filters the tweets by using 
the metadata that includes event type. In this side, we also reuse the 
REST bindings functionality for communication (via the Client component) 
and message processing (via the Notifiable Events Handler and Content Type 
Marshaler components). Thus, the proposed architecture for these components 
modularizes the Twitter functionalities derived from REST principles [6], 
which includes the addressing, access, and message representations. This 
modularity fosters the component reuse and the flexibility to choose different 
component implementations. 


5.3 Validation 


Implementation Details. We have integrated our social bindings into 
the FRASCATI platform (version 1.2). These bindings are based on the 
COMANCHE web server®. Both, FRASCATI and COMANCHE, are based on 
the FRACTAL component model and use the JULIA’ implementation of the 
FRACTAL runtime environment [4]. 

Again, as stated in subsection 4.3, we followed the generic process for 
the integration of new bindings to the FRASCATI platform. In a developer’s 
perspective, usage of Twitter social binding rely on the XML-based compo- 
nent description without knowledge requirements in regards to the Twitter 
API. 


Performance Results. To evaluate the social bindings, we implemented 
the event exchanges described in the scenario 2 (cf. section 2) using the 
Twitter bindings. 

Table 1 summarizes the results we obtained when executing several 
physical configurations for the scenario 2 using HTTP and Twitter as 
communication mechanisms for events exchange. 

As it can be seen, the indirection introduced by the micro-blogging 
service increments the event exchange by approximately 350% compared to 
the configuration a for the two mechanisms with the JSON representation. 
However, despite of this overhead, the simplicity of this interaction mecha- 
nism makes it still a suitable alternative to share events in an asynchronous 
way. Furthermore, the event notification rests less than a seconds, which is 


5 COMANCHE web server: http://fractal.ow2.org/tutorials/comanche.html 
"JULIA: http://fractal.ow2.org/julia 
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Event Providers Event Representation 


Event Provider 


Configuration Object (ms) ] JSON (ms) | XML (ms) | JSON (ms) | XML (ms) 
a) 1 Local Provider N/A 209.8 221 228 948.2 951.55 
b) 1 External Provider MacBook Pro 281.7 293.8 300.8 965.2 971.44 

Interaction HTTP Twitter 


Table 1: Performances of Twitter Bindings in terms of Latency 


a reasonable overhead to communicate relevant situations in the context of 
smart homes. 


6 Identity Support for Home Environment 


The two scenarios motivating our work (cf. section 2) illustrate the require- 
ments in terms of security and privacy that we need to consider in smart 
home environments. In particular, the usage of micro-blogging services 
in social communications requires the connection to the user account for 
posting messages. To achieve this interaction, we need to store the user 
login and password in our system, and merge our authentication process 
with the one used by the micro-blogging service. On the other hand, in our 
scenarios we use pervasive communications for filtering the picture display 
according to user preferences. In this case, the system also requires inhabi- 
tant identification to provide customized operations. Therefore, to deal with 
authentication issues we benefit from the SCA specification as well as from 
the extensibility of the FRASCATI platform in order to provide support for 
identity in home environments. 

In this section we report on the SCA recommendations concerning 
authentication mechanisms and their implementation into the FRASCATI 
platform using intents. We also present different identification process, using 
the SCA @Authentication annotation, for illustrating the flexibility of these 
mechanisms. 


6.1 Authentication Mechanism for Component Based Appli- 
cations 


As a non-functional service, authentication should not be mixed with business 
logic. By exploiting the SCA annotations and CBSE principles, we integrate 
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authentication mechanisms in business applications in a transparent way. 


The SCA @Authentication. The SCA Common Annotations specifica- 
tion [18] defines an @Authentication annotation which is intended to be 
attached to SCA services or components. The inclusion of this metadata into 
business components means that the associated operations require identity 
verification for being executed. Moreover, the Java API specification also 
defines a mechanism to retrieve the associated JAAS® (Java Authentication 
and Authorization Service) subject from a request context. Thus, informa- 
tion like credentials or authentication details can be attached to this subject 
and transmitted between components. 


Authentication by Intents. In order to implement the authentication 
mechanism into the FRASCATI platform, we exploit the notion of SCA 
intents. As described in [24], non-functional services can be dynamically 
attached to components. Using an interception mechanism, we can glue non- 
functional services—i.e. some other SCA components, called intents—to the 
business components. We benefit from this solution to intercept @Authenti- 
cation annotations and redirect the requests to the associated authentication 
intent. By using these intents, we clearly separate the business and the au- 
thentication concerns into distinct components. Authentication intents will 
be therefore implemented independently as regular SCA components. We 
can also define several authentication components and plug them according 
to additional metadata such as the authentication level. 


6.2 Heterogeneous Authentication Management 


Because of the home environment heterogeneity in term of devices and ser- 
vices, we may have to deal with different kinds of authentication mechanisms. 
For example, depending on the application sensitivity, home software can 
require different authentication levels. We can parametrize @Authentication 
for including the level as follows: @Authentication(level=x). With the level 
metadata, we are indicating that a intent respecting the x level has to be 
glued. In order to highlight how the FRASCATI authentication mechanisms 
can be useful in home environment, in this section we discuss different kinds 
of authentications. 


8Java AUTHENTICATION AND AUTHORIZATION SERVICE: http://java.sun.com/ 
javase/6/docs/technotes/guides/security/jaas/JAASRefGuide.html 
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IMEI-based Authentication. Every smartphone has a unique Interna- 
tional Mobile Equipment Identity number (IMEI) which can be used to 
identify users. The DIGIHOME platform can make the link between the 
IMEI number and inhabitants. To do this, the application running on the 
smartphone have to include this number into the request to DIGIHOME. By 
exploiting the user identity mechanisms provided by the FRASCATI platform, 
an IMEI-based authentication intent can associate the IMEI number with 
a registered user. Obviously, because of the device dependency, this kind 
of authentication should be only used for non-critical services with very 
low sensitivity. Nonetheless, this seamlessly authentication type can really 
enhance user experiment comparing to a traditional sign in with password. 


Biometric Authentication. With the help of a biometric sensor like a 
fingerprint scanner, it is possible to provide secured services such as bank 
management or house administration. Therefore, sensors can be included into 
the home environment in order to provide secured identification. Furthermore, 
the access of biometric sensors by means of Web Services promoted by the 
National Institute of Standards and Technology (NIST) [17] makes possible 
the usage of such sensors in FRASCATI-based applications. Thus, DIGIHOME 
can use a dedicated authentication intent accessing a biometric sensor via 
SOAP bindings [15] in order to ensure that this authentication has been 
successfully performed. 


External Authentication. In some situations, we need to combine our 
user identity system with external authentication policies. For example, the 
annotation @Authentication(external=Twitter) with the external metadata 
indicates that the associated intent is responsible of getting an access token 
from Twitter. To do that, the system needs to ensure that the user is 
connected to the DigiHome platform, then access to its Twitter credentials 
(i.e., login and password) and finally contact the Twitter authentication 
services. Then, calls from FRASCATI platform to the Twitter API can 
be achieved by storing the access token. This principle can be applied to 
several external services but implies to store external connection informations. 


The usage of all these authentication types only requires the inclusion 
of the @Authentication annotation into the business code. By using this 
annotation and the concerns isolation promoted by SCA, the FRASCATI 
platform is able to automatically glue non-functional and business compo- 
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nents together. In this way, heterogeneous authentication principles can be 
mixed without intrusive modifications into functional code. 


7 Related Work 


In this section we present three kinds of related work: proposals that benefit 
from micro-blogging services, approaches dealing with discovery in pervasive 
environments and discussions in regards of user identity. 


Pervasive Communications. In the literature, we find several middle- 
ware solutions, such as INDISS [2] (INteroperable DIscovery System for 
network Services) and ReMMoC |7] (Reflective Middleware for Mobile Com- 
puting), that provide interoperability for discovery protocols. The problem 
with some of these solutions is that they are not flexible enough for using dif- 
ferent interaction mechanisms when the services are discovered. Furthermore, 
they have been designed for working on devices with restricted capabilities, 
thus limiting the range of applications that can use them. Although in our 
solution we do not support discovery protocol interoperability, by benefiting 
from FRASCATI platform extensibility, we can easily add new pervasive 
bindings when required. Furthermore, by integrating BINJIU as SCA perva- 
sive bindings, we promote its usage in different kinds of applications, not 
only the mobile ones. 


Regarding approaches that exploit specifically UPnP, we find some 
solutions [5, 11] in domestic environments (7.e., automated homes) that aim 
to provide control on home appliances. In particular, this kind of approaches 
uses UPnP-based architectures to enable the simple and transparent access 
of different resources present in the environment. Some improvements are 
included in UPnP, such as service configuration persistence and enhanced 
management options. However, these solutions are difficult to apply in the 
development of new applications requiring discovery capabilities, while the 
combination of BInJIU and SCA make easier the incorporation of the UPnP 
technology when required. 

In term of proxy generation, we can also mention the 22z platform [3] 
which propose a generative approach for building gateways between heteroge- 
neous protocol. Focused on domestic environments, it allows communications 
among incompatible devices. 
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Social Collaborations. To the best of our knowledge, there is no proposal 
dealing with event propagation via micro-blogging services in pervasive 
environments. However, we benefit from the ideas proposed in some of these 
approaches in order to improve our solution. For example, TwitterStand [23] 
and TweetSieve [8] are systems able to extract relevant news from a noisy 
medium, such as Twitter. Thanks to the modular architecture of social 
bindings, we easily incorporate these techniques to support a smarter event 
selection. Furthermore, these techniques can also be used as a stabilization 
mechanism to avoid the notification of not relevant events for the system 
and participants. 

In [16], the authors propose a social networking middleware that com- 
bines social and physical proximity relationships between mobile users in 
order to suggest them potential people with whom they could perform ac- 
tivities of common interest. The mechanisms proposed in this work for 
determining the social and physical proximity can be also integrated in the 
social bindings in order to infer events that could be relevant for the system 
and home inhabitants. 


User Identity. Different studies investigate the field of access-control in 
digital environments. In [1], authors describe usage of a smartphone-based 
distributed access-control system. Focused on door management in an office 
environment, a user study illustrates the use of the Grey system. Using 
bluetooth communication, it allows to define flexible policies in order to fit 
with users’ needs. Comparing to physical keys, the flexibility introduced by 
Grey greatly increased the effectiveness and the security of the system. On 
the other side, [13] investigates access-control management in home context 
for data sharing. This study illustrate the need of fine-grained access-control 
for satisfying users’ requirements. Reactive policy creation is also described 
as a required feature. 

Those works illustrate the importance of flexibility in access-control 
systems, especially in term of policies. The integration of heterogeneous 
authentication mechanisms here described should be extended in order to 
include dynamic policies management for our platform. 


8 Conclusion 


In this paper, we reported on the implementation of new bindings and 
authentication mechanisms for an SC A-based distributed system in a home 
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pervasive environment. In particular, we demonstrated their integration 
into the FRASCATI platform, an open source implementation of the Service 
Component Architecture (SCA) standard [24]. Relying on well-accepted tech- 
nologies, the new bindings increase capabilities of SCA in two complementary 
ways. 

Using UPnP discovery and communication capabilities, pervasive bind- 
ings supply spontaneous communications between SCA components or legacy 
UPnP devices. On the other hand, social bindings use the Twitter micro- 
blogging service in order to disseminate applications events to end users. 
Finally, we introduce a mechanism for managing heterogeneous authen- 
tication process according to home devices and services. Two scenarios 
illustrating the integration of these capabilities into the FRASCATI platform 
have been presented to motivate and validate our proposals. 

Future work includes to add support for new pervasive (e.g., SLP [9] and 
Avahi®) and social bindings (e.g., Facebook and OStatus!®). We will take 
advantage of FRASCATI runtime reconfiguration capabilities to dynamically 
integrate these new bindings in SCA applications. Regarding UPnP, we 
plan to adapt the UPnP bindings for making them compliant with the 
Android platform. Moreover, we will integrate new UPnP certified profile 
implementations, in order to easily interact with home appliances. On 
the other hand, the support of identity into home environment could be 
extended in order to provide identity for external services by deploying an 
Openld server!! at home and using it for centralize user information and 
authentication. 
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